ac3e9018a4db419c8ecba3d923180b30_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ac3e9018a4db419c8ecba3d923180b30_JaffaCakes118
Size

228KB
MD5

ac3e9018a4db419c8ecba3d923180b30
SHA1

b23f14b9f16fe8a866ef2214b4ab21a14f5adbd6
SHA256

a8a4414280c029f2257b17a1343071ad5138298d94d623465e87a8cd100ef99e
SHA512

757e003f2edada9316b05b1edd90d3374ffe37703639c30482803c0b25e4c380398dd2f6c2ea4035eedea7fd79dc10ccb612b5f392a4c93adcee8e4e4fb26c25
SSDEEP

6144:3drgmKGpht3U4X66CS8uwqRhubwYF2WIZY:3a87EWLrwehucYFh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac3e9018a4db419c8ecba3d923180b30_JaffaCakes118

Files

ac3e9018a4db419c8ecba3d923180b30_JaffaCakes118
.exe windows:4 windows x86 arch:x86

48f8e6abaed64ad81a0a6aa1c28d420e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualAlloc
ReleaseSemaphore
ExitProcess
LoadLibraryA
GetProcAddress

Sections

.text
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 111KB - Virtual size: 363KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ